Serena
Semantic code MCP for any agent. Symbol-level navigation, refactors, cross-file refs across 40+ languages. Backed by language servers.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-18
Serena is a community MCP server from Oraios AI that bridges language servers to AI agents for semantic code operations. It provides symbol navigation, refactoring, and cross-file references across 40-plus languages. The tool is open source with reasonable documentation and clear purpose. However, it requires installation via git clone rather than a proper package registry, which weakens supply chain verification. The maintainer appears to be a smaller organisation with limited track record. Permissions are moderately scoped: it needs filesystem read/write for code navigation and refactoring operations, plus shell execution to spawn language server processes. No known security incidents exist, but the install method and relatively unknown maintainer introduce supply chain risk. Best suited for developers who can audit the code themselves before deployment.
Green flags
- Open source with clear documentation and purpose
- No environment variables or secrets required
- Scoped to code operations, not arbitrary system access
- No known security incidents or CVEs
- Supports multiple established AI hosts (Claude Desktop, Cursor, etc)
Red flags
- Install via git clone only, no npm/pypi package for version pinning
- Oraios AI is relatively unknown with limited public track record
- Requires shell execution to spawn language server processes
- Filesystem write access for refactoring operations across entire codebase
Permissions requested
Install
uvx --from git+https://github.com/oraios/serena serena start-mcp-server
Review
Install this if you use Claude or Cursor on multi-file codebases and want proper symbol navigation instead of glorified grep. Skip it if you're doing single-file work or your language lacks a solid language server. It's the boring, essential plumbing that makes agent-driven refactors actually work.
Good at
- Proper semantic navigation: renames propagate correctly, references respect scope, no false positives from string matches.
- Supports 40-plus languages via their native language servers, so you're not locked to one ecosystem.
- Cross-file reference lookups are fast and accurate, which makes pre-refactor reconnaissance actually useful.
- Backed by the same LSP tooling your editor uses, so behaviour is consistent and predictable.
Watch out
- Requires separate installation of each language server you care about, which is fiddly if you work across many languages.
- Python 3.10 minimum, and the uvx install step is an extra dependency to manage.
- No built-in diagnostics or health checks, so if a language server is missing or misconfigured, you get silent failures.
- Hosts beyond Claude Desktop need manual MCP config, which isn't documented exhaustively in the README.
Use cases
- Reliable rename across a Java codebase
- Cross-file reference lookups in a Python repo
- Finding all usages of a TypeScript symbol
- Semantic search before a large refactor
Getting started
Works with
Similar MCPs
- GitHubFull GitHub API access - manage repos, issues, PRs, and code search. One of the most useful MCPs for any developer workflow.
- GrafanaGrafana Labs' official MCP. Read dashboards, datasources, alerts, and run Loki/Prometheus queries from inside your agent.
- SentryPull live errors, issues, and replays from Sentry into Claude. Great for debugging sessions where the model can see what actually broke in prod.
- MCP CLIInteractive CLI inspector for MCP servers supporting OAuth, tool calls, resource reads, and prompt runs.